CCNA - Membuat ACL
acl
std acl lihat tujuan (taro deket tujuannya)
ext acl lihat source (taro deket sourcenya)
router(config)# access-list 5 deny 172.16.20 0.0.0.255
router(config)#access-list 5 permit all
router(config)#line vty 0 4
router(config-line)#acces-class 5 in
create access list
// 10.1.1.0/24 tidak boleh telnet ke router yudi
Router(config)#access-list 40 deny 10.1.1.0 0.0.0.255
Router(config)#access-list 45 permit any
Router(config)#line vty 0 4
Router(config-line)#access-class 45 in
//172.16.20.0/24 tidak boleh akses ke web server 172.16.2.100
Router(config)#access-list 140 deny tcp 172.16.2.0 0.0.0.255 host 172.16.1.100 eq www
Router(config)#access-list 140 permit IP any any
Router(config)#interface serial 0/0
Router(config-if)#IP access-group 140 in
//cek access list
RTR_Yudi#sh access-lists
Standard IP access list 15
deny 10.1.1.0, wildcard bits 0.0.0.255
deny 10.2.2.0, wildcard bits 0.0.0.255
permit any
Extended IP access list 120
deny tcp 172.16.20.0 0.0.0.255 host 172.15.2.100 eq www
permit ip any any (10 matches)
Comments
Post a Comment